Have a web site with windows authentication set. When accessing the site, a user name/password challenge is displayed. Several users can enter their password and access the site no problem. I have a new domain user that cannot. Event log says "The user has not been granted requested logon type at this machine". The user is setup just like others that work (Domain User, Administrator, Domain Admin). These settings are done on the domain controller. Nothing done to web server. The error displayed on the browser is: 401 - Unauthorized: Access is denied due to invalid credentials. You do not have permission to view this directory or page using the credentials that you supplied. I have rebooted the server. I have tried deleting and re-adding user. The user can log in locally. I granted the user in question all rights (domain admin, administrator, etc.). I logged on as this person on the iis server and can browse the website directories. When I access the web site with Windows authentication set, it gives me a password challenge. This (new) user cannot authenticate. Other users with the same credentials work okay. If I remove the windows authentication, everything works fine. I need this site to be authenticated. The log file entry is as follows: #Software: Microsoft Internet Information Services 7.0 #Version: 1.0 #Date: 2011-03-16 11:22:41 #Fields: date time s-ip cs-method cs-uri-stem cs-uri-query s-port cs-username c-ip cs(User-Agent) sc-status sc-substatus sc-win32-status time-taken 2011-03-16 11:22:41 10.1.1.201 GET / - 80 - 68.214.95.151 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+6.1;+WOW64;+Trident/4.0;+GTB6.6;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+Media+Center+PC+6.0;+MDDR;+.NET+CLR+1.1.4322;+.NET4.0C;+.NET4.0E;+MS-RTC+LM+8) 401 2 5 4 2011-03-16 11:22:52 10.1.1.201 GET / - 80 - 68.214.95.151 Mozilla/4.0+(compatible;+MSIE+8.0;+Windows+NT+6.1;+WOW64;+Trident/4.0;+GTB6.6;+SLCC2;+.NET+CLR+2.0.50727;+.NET+CLR+3.5.30729;+.NET+CLR+3.0.30729;+Media+Center+PC+6.0;+MDDR;+.NET+CLR+1.1.4322;+.NET4.0C;+.NET4.0E;+MS-RTC+LM+8) 401 1 3221225819 5 This points to a permissions issue, but where? I have wasted so many hours on this. Very frustrating.

Have you looked at the security of the folder(s) that are providing the application? It is possible that the folder has inheritance broken and only the current individuals specified to access the folder. Although an administrator could take ownership of the folder and change the permissions, that configuration would prevent a Domain Administrator from accessing the web site.fr3dd